Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File: CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier: WKKGpZqf2FXvpIBTjpjCS6JhXTIv0QEIDAXm9sWlnZw=
Subject key identifier: 29:CF:86:DC:F9:5D:B1:8B:39:73:06:55:85:32:85:E7:B3:52:AC:7E
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer: /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial: 0196767A4C2CB9D8B9881B6FB2A7449E5EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number: 11AA
Signing time: Sun 27 Apr 2025 09:00:48 +0000
Manifest this update: Sun 27 Apr 2025 09:00:48 +0000
Manifest next update: Mon 28 Apr 2025 09:00:48 +0000
Files and hashes: 1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: yOdLLj0jVLz6WbgWjFxHJv4cGKpYdJz3n3oqxK2R7P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:4c:2c:b9:d8:b9:88:1b:6f:b2:a7:44:9e:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Validity
Not Before: Apr 27 09:00:48 2025 GMT
Not After : Apr 28 09:00:48 2025 GMT
Subject: CN=29cf86dcf95db18b39730655853285e7b352ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:84:2f:c0:77:78:39:63:66:1c:16:18:d6:
48:1f:41:6e:8a:79:af:99:74:6e:14:83:55:68:21:
72:c5:02:dd:23:23:bf:f8:9a:81:da:9a:19:c4:40:
48:01:11:19:e0:e0:84:20:47:12:01:13:4e:9a:f6:
f9:aa:34:21:26:be:ae:c8:93:c1:a3:1b:6c:41:b0:
99:14:69:85:54:39:38:99:b9:4e:53:36:a9:4b:e1:
9f:18:7c:f9:97:7e:31:e8:63:41:af:02:04:11:f7:
9f:e0:84:da:dd:16:29:1f:1b:61:fa:94:a6:42:46:
00:04:ca:d5:d6:1b:91:21:96:b1:03:46:08:cb:50:
ee:57:a8:82:6f:f5:5c:83:1d:2d:7f:9a:a8:4f:01:
86:fb:c2:1b:de:21:c6:c3:dd:96:88:1c:b4:d2:fb:
26:df:b1:94:ad:78:b8:87:7d:d8:f3:4d:0b:90:6f:
1c:49:93:f2:c4:0c:33:b0:29:2b:f2:43:f1:d4:45:
0f:62:48:79:ac:c1:aa:71:ac:a1:0f:df:da:c5:74:
f0:cb:5f:1c:aa:2f:44:22:0e:8f:45:39:bc:87:b6:
01:8c:f5:37:2e:ff:8b:7a:d9:cc:0c:b9:d3:c9:5c:
d9:2a:7f:f9:d1:e8:90:30:ba:71:bf:d1:a3:3f:23:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:86:DC:F9:5D:B1:8B:39:73:06:55:85:32:85:E7:B3:52:AC:7E
X509v3 Authority Key Identifier:
keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:7d:9c:0a:7e:0e:b6:b0:5b:fb:4f:24:dd:4a:67:52:fd:
ed:c9:37:2f:61:b6:74:98:86:c5:72:b1:68:81:34:e9:65:a3:
f9:d3:98:13:6d:3f:36:42:46:3b:be:e8:87:11:d7:a8:54:54:
40:ec:9a:12:ef:c2:9e:79:6e:ab:d3:fe:3c:f0:0e:6f:41:1b:
9a:7a:8f:6a:68:74:19:72:65:91:39:5b:51:f4:25:07:05:07:
b6:3b:32:03:8b:aa:f9:e4:64:c5:a8:bc:7c:39:dd:71:ee:da:
74:14:56:62:84:bf:c3:00:46:b0:f1:9a:c1:c6:ca:30:87:4a:
0b:44:40:4a:18:c0:e0:4c:99:a3:45:96:e0:ac:6b:ab:37:a8:
fc:24:05:32:9e:45:50:de:aa:65:dc:b1:25:75:9d:89:45:c1:
03:33:7a:14:d6:04:ab:f2:25:b0:31:f8:29:1b:37:17:9e:67:
65:5d:06:56:b6:91:d4:cb:aa:a6:41:d4:6e:93:c8:a4:d7:63:
a8:17:84:8c:0b:86:03:40:f6:5e:61:f2:98:fb:b2:65:1d:90:
3d:1a:e6:2e:29:6d:ed:eb:71:41:99:3d:4e:1e:7e:91:df:0d:
de:65:df:04:4a:97:84:fd:b0:a7:bf:85:15:f5:80:7a:c3:35:
10:3f:60:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:49:05 2025 by rpki-client